can someone check something for me

[F17ZY]

hey guys i just installed some programs and looked in task manager and seen something running that i have never seen befor it's call wininit.exe can someone have a look and see if they have the same if not i no i have some kind of virus or spyware thanks

 

[Sassa]

I have winnt.exe too...
Just relax...

 

[Antman]

:roflmao:

The worst spyware of all - Windows!

winInIt - Sassa. Chuckle. All over myself.

 

[Sassa]

:roflmao:

The worst spyware of all - Windows!

You are so mean...

 

[F17ZY]

it's just coz i downloaded a program and my nod 32 said it was a virus but coz i used the program befor but from some other site i tured it off well i installed it and when i tured it back on it was sayin ther was a virus on my system so i ran a virus scan and it brung alot up but it was just the file never seen lol so i just fort i would check incase i del something that was needed and thanks for letting me no

 

[Sassa]

winInIt - Sassa. Chuckle. All over myself.

I mistyped it...
It happens....

 

[Jarhead57]

I found this:

Wininit.exe installs with Microsoft Windows Vista (formerly codenamed 'Longhorn'). When installing a program, a particular file or files may need to be run once after rebooting your system and then not run again. This file helps in this process.

Wininit.exe also installs with the W32.HLLW.Bymer worm. This worm spreads across weakly protected network. It installs the Dnetc Client program (more info at What is Distributed.net?) which is not a virus. It also modifies the load= line in your win.ini file. It then starts checking IP addresses looking for a way to spread. This could downgrade system performance.

Additional background info on this worm can be found at http://www.symantec.com/security_response/writeup.jsp?docid=2000-122012-3537-99

 

[Sassa]

I found this:

Wininit.exe installs with Microsoft Windows Vista (formerly codenamed 'Longhorn'). When installing a program, a particular file or files may need to be run once after rebooting your system and then not run again. This file helps in this process.

Wininit.exe also installs with the W32.HLLW.Bymer worm. This worm spreads across weakly protected network. It installs the Dnetc Client program (more info at What is Distributed.net?) which is not a virus. It also modifies the load= line in your win.ini file. It then starts checking IP addresses looking for a way to spread. This could downgrade system performance.

Additional background info on this worm can be found at http://www.symantec.com/avcenter/venc/data/w32.hllw.bymer.htm

Nice explanation...
+reps

 

[Antman]

The OP has not provided sufficient data to indict this particular instance of WinInit.exe as a virus.

WinInit is a vital system component and should always present ONCE in Task Manager. If there are two, you are probably infected.

In Task Manager Processes, right click wininit.exe and select Open File Location. You should arrive at "C:\Windows\System32\wininit.exe"

To be certain, scan that single file with your preferred AV app, or even a battery of online scans.

The presence of a vital system file is by no means singular evidence of a malware intrusion or infection.

 

[F17ZY]

thanks guys i only have the 1 running and i have scaned it with nod 32 and some online avs and all clean thanks a bunch